Nessus Plugin #11229

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

phpinfo.php

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2003 Randy Matz

Summary:

Checks for the presence of phpinfo.php

Version:

$Revision: 1.6 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

Many PHP installation tutorials instruct the user to create
a file called phpinfo.php. This file is often times left in
the root directory after completion.
Some of the information that can be garnered from this file
includes: The username of the user who installed php, if they
are a SUDO user, the IP address of the host, the web server
version, The system version(unix / linux), and the root
directory of the web server.

Solution : remove it
Risk factor : Low